User Requirements¶
Cluster API Provider Nutanix Cloud Infrastructure (CAPX) interacts with Nutanix Prism Central (PC) APIs using a Prism Central user account.
CAPX supports two types of PC users:
- Local users: must be assigned the
Prism Central Adminrole. - Domain users: must be assigned a role that at least has the Minimum required CAPX permissions for domain users assigned.
See Credential Management for more information on how to pass the user credentials to CAPX.
Minimum required CAPX permissions for domain users¶
The following permissions are required for Prism Central domain users:
- Create New Virtual Machine
- Delete Existing Virtual Machine
- Power On Virtual Machine
- View Existing Virtual Machine
- Create Category
- Delete Category
- View Category
- View Cluster
- View Cluster Pgpu Profiles
- View Cluster Vgpu Profiles
- Create Image
- Delete Image
- View Image
- View Project
- View Subnet
- Detach Volume Group From AHV VM
Note
The list of permissions has been validated on PC 7.3 and above.
CAPX v1.8.x Upgrade Requirements¶
When upgrading CAPX v1.7.x to v1.8.x, users must meet the following additional requirements:
The following permissions are required for Prism Central domain users:
- Create Category
- Create Category Mapping
- Create Image
- Create New Virtual Machine
- Create Or Update Name Category
- Create Or Update Value Category
- Create Virtual Machine
- Delete Category
- Delete Category Mapping
- Delete Image
- Delete Name Category
- Delete Value Category
- Delete Virtual Machine
- Detach Volume Group From AHV VM
- Power On Virtual Machine
- View Category
- View Category Mapping
- View Cluster
- View Cluster Pgpu Profiles
- View Cluster Vgpu Profiles
- View Image
- View Name Category
- View Project
- View Subnet
- View Value Category
- View Virtual Machine